Flow locks: Towards a core calculus for dynamic flow policies

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3924 LNCS, Issue , 2006, Pages 180-196

  Broberg, Niklas ^a   Sands, David ^a  

^a NONE

Author keywords

[No Author keywords available]

Indexed keywords

CLASSIFICATION (OF INFORMATION); CODES (SYMBOLS); COMPUTER PROGRAMMING LANGUAGES; DATA PROCESSING; INFORMATION ANALYSIS; INTERFACES (COMPUTER); SECURITY OF DATA; SEMANTICS; CALCULATIONS; COMPUTATIONAL LINGUISTICS; INFORMATION DISSEMINATION; LOCKS (FASTENERS); STREAM FLOW;

DYNAMIC FLOW POLICIES; DYNAMIC INFORMATION; MULTILEVEL SECURITY; STATIC VERIFICATION;

NUMERICAL METHODS; DYNAMICS;

DYNAMIC INFORMATION; INFORMATION FLOW PARADIGM; INFORMATION FLOW POLICIES; MULTI-LEVEL SECURITY; PROGRAMMING LANGUAGE RESEARCHES; SECURE INFORMATION FLOW; STATIC VERIFICATION; TYPE AND EFFECT SYSTEMS;

EID: 33745794062     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11693024_13     Document Type: Conference Paper

References (23)

1. M. Abadi, A. Banerjee, N. Heintze, and J. Riecke. A core calculus of dependency. In Proc. ACM Symp. on Principles of Programming Languages, pages 147-160, Jan. 1999.
2. A. Almeida Matos and G. Boudol. On declassification and the non-disclosure policy. In Proc. IEEE Computer Security Foundations Workshop, June 2005.
3. A. Askarov and A. Sabelfeld. Security-typed languages for implementation of cryptographic protocols: A case study. In Proc. European Symp. on Research in Computer Security, volume 3679 of LNCS, 2005.
4. A. Banerjee and D. A. Naumann. Stack-based access control and secure information flow. Journal of Functional Programming, 15(2):131-177, Mar. 2005.
5. S. Chong and A. C. Myers. Security policies for downgrading. In ACM Conference on Computer and Communications Security, pages 198-209, Oct. 2004.
6. D. E. Denning and P. J. Denning. Certification of programs for secure information flow. Comm. of the ACM, 20(7):504-513, July 1977.
7. M. Hicks, S. Tse, B. Hicks, and S. Zdancewic. Dynamic updating of information-flow policies. In Proc. Foundations of Computer Security Workshop, 2005.
8. H. Mantel and D. Sands. Controlled downgrading based on intransitive (non)interference. In Proc. Asian Symp. on Programming Languages and Systems, volume 3302 of LNCS, pages 129-145. Springer-Verlag, Nov. 2004.
9. A. C. Myers. JFlow: Practical mostly-static information flow control. In Proc. ACM Symp. on Principles of Programming Languages, pages 228-241, Jan. 1999.
10. A. C. Myers and B. Liskov. A decentralized model for information flow control. In Proc. ACM Symp. on Operating System Principles, pages 129-142, Oct. 1997.
11. A. C. Myers and B. Liskov. Complete, safe information flow with decentralized labels. In Proc. IEEE Symp. on Security and Privacy, pages 186-197, May 1998.
12. A. C. Myers and B. Liskov. Protecting privacy using the decentralized label model. ACM Transactions on Software Engineering and Methodology, 9(4):410-442, 2000.
13. A. C. Myers, A. Sabelfeld, and S. Zdancewic. Enforcing robust declassification. In Proc. IEEE Computer Security Foundations Workshop, pages 172-186, June 2004.
14. S. Pinsky. Absorbing covers and intransitive non-interference. In Proc. IEEE Symp. on Security and Privacy, pages 102-113, May 1995.
15. J. M. Rushby. Noninterference, transitivity, and channel-control security policies. Technical Report CSL-92-02, SRI International, 1992.
16. A. Sabelfeld and A. C. Myers. Language-based information-flow security. IEEE J. Selected Areas in Communications, 21(1):5-19, Jan. 2003.
17. A. Sabelfeld and D. Sands. Probabilistic noninterference for multi-threaded programs. In Proc. IEEE Computer Security Foundations Workshop, pages 200-214, July 2000.
18. A. Sabelfeld and D. Sands. Dimensions and principles of declassification. In Proc. IEEE Computer Security Foundations Workshop, 2005.
19. S. Tse and S. Zdancewic. Run-time principals in information-flow type systems. In Proc. Symposium on Security and Privacy, 2004.
20. S. Tse and S. Zdancewic. Designing a security-typed language with certificate-based declassification. In Proc. European Symp. on Programming, volume 3444 of LNCS, pages 279-294. Springer-Verlag, Apr. 2005.
21. D. Volpano, G. Smith, and C. Irvine. A sound type system for secure flow analysis. J. Computer Security, 4(3):167-187, 1996.
22. S. Zdancewic and A. C. Myers. Robust declassification. In Proc. IEEE Computer Security Foundations Workshop, pages 15-23, June 2001.
23. L. Zheng and A. Myers. Dynamic security labels and noninterference. In Proc. Workshop on Formal Aspects in Security and Trust, 2004.